Not today, but 2-3 days ago I was....

I forwarded the messages to

Code:

abuserejects

that would be @at

Code:

coldrain.net

In a way, that could be a good sign People being pro-active, and forwarding their spam to their (and hopefully other services too) - instead of just deleting it....?

---

Author: Jason_m,  Posted: Mon Dec 31, 2007 4:13 am    Post subject: suspended submissions to the ftc

---

I guess the ftc's servers are being overloaded. But anyway, when this happens, I suspend submissions to that address. Not only is it near useless since most are failing anyway, but the server has to wait the full timeout before finally failing it - which holds up the cue.

---

Author: brewt, Location: USA Posted: Mon Dec 31, 2007 9:38 am    Post subject:

---

Knujon sends to this address on your behalf.

http://www.knujon.com/sendusspam.html wrote:

All items sent to Knujon are also forwarded to the FTC(uce.gov).

So the solution to your issue seems to be: stop sending to this address.

---

Author: AlphaCentauri,  Posted: Mon Dec 31, 2007 3:28 pm    Post subject:

---

I got an amusing bounce. I had coppied spam@uce.gov when I sent a report to a registrar. In order to get through the registrar's filters, I had to change all the decimal points in the URLs and IP addresses to " -dot- "

My messages apparently got through to the registrars, but bounced from uce.gov with complaints about a "dot-stuffed message."

---

Author: ahoier, Location: USA Posted: Mon Dec 31, 2007 5:49 pm    Post subject:

---

do all the knujon addresses dump to the spam@uce.gov address? I have a feeling they may...

I usually send to my personal address and whatever the main topic is (either rx, fakes, depositscam, etc).



Maybe they need a sneakernet delivery instead? hehe. the mailserver(s) just can't cope I guess.

I've been forwarding the "delay" messages (yes, the bounces from uce are for the most part "delay" messages, stating the delivery will be retried for 5 days or somesuch) to the abuserejects until someone deems it not necessary

---

Author: ahoier, Location: USA Posted: Fri Jan 04, 2008 2:12 am    Post subject:

---

I haven't been closely monitoring the "delays" and "fails" but here's a slightly varied message I received today....

Quote:

----- The following addresses had permanent fatal errors ----- spam@uce.gov (reason: 550 5.7.1 <spam@uce.gov>... Relaying denied. IP name lookup failed [209.198.81.49]) (expanded from: <rx@coldrain.net>) ----- Transcript of session follows ----- ... while talking to spammy2.uce.gov.: >>> DATA <<< 550 5.7.1 <spam@uce.gov>... Relaying denied. IP name lookup failed [209.198.81.49] 550 5.1.1 spam@uce.gov... User unknown <<< 503 5.0.0 Need RCPT (recipient) Final-Recipient: RFC822; rx@coldrain.net X-Actual-Recipient: RFC822; spam@uce.gov Action: failed Status: 5.7.1 Remote-MTA: DNS; spammy2.uce.gov Diagnostic-Code: SMTP; 550 5.7.1 <spam@uce.gov>... Relaying denied. IP name lookup failed [209.198.81.49] Last-Attempt-Date: Thu, 3 Jan 2008 21:05:40 -0500

And it's happening again

Im guessing once the government has a spammer "in holding" they will THEN go through the spam@uce.gov database(s) and attempt to match fingerprints and such....between the data they confiscated at the time of arrest, with the data submitted to them via this address.

So, in due time, your spam contributions sent to this address COULD be aiding a spammer in getting taken down

Atleast, that's one way I think of it....I mean, how else can these news reporting sites and anti-spammer sites, etc. figure out a spammer has sent some thousands of messages...? Surely there must be data-footprints left behind within the messages, from the machines they've hijacked, etc.\

I can't find any links at the moment, but I know we've seen and read them in news releases, press releases, etc...they tend to quote some "high number" of either infected machines, numbers of messages transmitted, etc.


Of course, not everyone reports to the SEC/FTC though...so who knows, the numbers could even be higher.

All times are GMT